It also tells you about your privacy rights and how the law protects you.
Personal data which we collect about you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We collect a variety of information about our customers and visitors to our website (http://andrewsgray.photography). This personal data falls into these categories:
Identity Data includes title, first name, last name, username or similar identifier and an encrypted version of your login/password. If you interact with us through social media, this may include your social media user name.
Contact Data includes billing address, delivery address, email address and telephone numbers.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Profile Data includes your username and password, purchases or orders made by you, preferences, feedback and survey responses, as well as any profile data which we have added (for example, using analytics and profiling).
Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Usage Data includes information about how you use our website, products and services.
Tracking Data includes information we or others collect about you from cookies and similar tracking technologies, such as web beacons, pixels, and mobile identifiers.
Marketing and Communications Data includes your preferences in receiving direct marketing from us and our third parties and your communication preferences.
If you choose not to share personal data with us, or refuse certain contact permissions, we might not be able to provide the products and services you’ve asked for.
How is your personal data collected?
We use different methods to collect data from and about you including through:
Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or through chat or social media.
This includes personal data you provide when you:
Automated technologies or interactions. As you interact with us, including visiting the website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We may also collect Tracking Data when you use our website.
Third parties or publicly available sources. We may receive personal data about you from various types of third parties, including:
How we use your personal data
Generally, we do not rely on consent as a legal basis for processing your personal data other than where the law requires it, for example in relation to sending certain direct marketing communications. Where our legal basis is consent, you have the right to withdraw consent any time.
We may use your collected data to carry out direct marketing – via email or post.
From the beginning of this website, we have always carried out a policy of opt-in when it comes to email newsletters. Newsletter lists have only been compiled from users and customers who have specifically chosen to subscribe.
You of course have the right to change your mind at anytime and opt out. You can unsubscribe at anytime using the unsubscribe link at the base of any newsletter I may send out.
Email marketing campaigns published by this website or its owners may contain tracking facilities within the actual email. Subscriber activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include; the opening of emails, forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity [this is by no far a comprehensive list].
This information is used to refine future email campaigns and supply the user with more relevant content based around their activity.
The newsletters, lists and personal data are handled stored by a third party – “MailChimp”.
Disclosures of Personal Data
Specific third parties:
International Data Transfers:
Some of our third party providers are based outside the EEA therefore processing of data may mean transfer of that data outside the EEA.
If the providers are based in the US they are required to use the US-EU Privacy Shield. If they do not, then we will try to use as best secure practices as we can until such entities are fully upto speed with the new GDPR regulations.
We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for seven years after a purchase for tax purposes.
We will also retain Identity data indefinitely to keep a record of limited edition print purchases, to preserve authenticity of product. You may request to have this information deleted from record at anytime by contacting us. Edition details will then read as “client requested anonymity”.
GDPR and EU Residents
If the General Data Protection Regulation applies to you because you are in the European Union, you have rights under data protection laws in relation to your personal data:
These rights are subject to certain rules around when you can exercise them. If you wish to exercise any of the rights set out above, please contact us.
You will not have to pay a fee to access your personal data. However, we may charge a fee if your request is unfounded, repetitive or excessive. Or, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
It may take upto 31 working days to respond to any request.
You have the right to make a complaint at any time to the Information Commissioner’s Office, though we ask that you give us every opportunity to deal with your request before taking this course of action.
Cookies are small files saved to the user’s computers hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website.
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors.
Other cookies may be stored to your computers hard drive by external vendors when this website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer. No personal information is stored, saved or collected.
Although this website only looks to include quality, safe and relevant external links, users are advised adopt a policy of caution before clicking any external web links mentioned throughout this website. (External links are clickable text / banner / image links to other websites, similar to; www.thevillagr.co.uk or Northumberland Website Design.)
Adverts and Sponsored Links
This website may contain sponsored links and adverts. These will typically be served through our advertising partners, to whom may have detailed privacy policies relating directly to the adverts they serve.
Social Media Platforms
Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
Shortened Links in Social Media
This website and its owners through their social media platform accounts may share web links to relevant web pages. By default some social media platforms shorten lengthy urls [web addresses] (this is an example: http://bit.ly/zyVUBo).
Users are advised to take caution and good judgement before clicking any shortened urls published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine urls are published many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.
v2.0 21st May 2018 Edited & customised by: Andrew S Gray Design, The Croft, South Charlton, Alnwick, Northumberland, NE66 2NA